Challenge

‍

Teamtailor, a leading HR SaaS company that helps businesses streamline their hiring processes and improve their candidate experience and employer branding, faced several security challenges while managing a hybrid remote workforce of approximately 500 employees in 15 countries around the globe. As a rapidly growing company handling sensitive recruitment data for over 10,000 customers in over 100 countries, Teamtailor needed to strengthen its security posture while maintaining operational efficiency and productivity.

‍

Johan Tempelman is Teamtailor’s Chief Information Security Officer (CISO) and Head of IT. By working with Beyond Identity, Johan wanted to improve authentication security against phishing and credential-based attacks while maintaining a smooth and easy-to-use authentication experience for the company’s employees. He also sought to enhance visibility and security controls over bring-your-own-devices (BYOD) used by employees and by Teamtailor’s business partners.

‍

Being a cloud-native software company, Teamtailor aimed to simplify processes using a central  Identity Provider (IdP), single sign-on technology, and device management tools. Although they have not experienced any breaches, Johan sought to proactively improve the security foundation around authentication and eliminate the possibility of attacks. He noted:

‍

“Phishing, account takeover, and credential theft are super common attack vectors, so trying to be proactive and improve that before we actually experience any serious breaches or incidents made sense for us.”

‍

‍

‍

Solution

‍

Teamtailor implemented Beyond Identity's passwordless, phishing-resistant MFA and device security solutions across their organization, "Getting rid of passwords is really good from that perspective, and compared to native passkeys available in Microsoft and Google, Beyond Identity allows us to enforce it on all our users." The improved user experience allowed Johan to enforce shorter web sessions for his users without causing any frustration, “We can force users to authenticate more often than what was practically possible with the classic password and MFA.”

‍

“We can force users to authenticate more often than what was practically possible with the classic password and MFA.”

‍

Integrating the solution with their existing technology stack, including IdP, MDM, and SIEM, allows the team to monitor, validate, and report on every device accessing resources. Conducting the device posture checks and verifying each user “gives us more control and trust over our security posture," says Tempelman. When asked if Beyond Identity assisted in investigating alerts, Johan mentioned that although “It’s very rare, I would say it's more trustworthy. It's quicker to understand if someone signed in, from what device, and if there are any deviations from normal patterns.”

‍

‍

"Conducting the device posture checks and verifying each user gives us more control and trust over our security posture"

‍

‍

‍

Results

‍

Implementing Beyond Identity has delivered significant improvements across authentication and device security, as well as user experience and compliance for Teamtailor. 

‍

Enhanced security and trust

‍

“Identity management and strong user authentication are an important part of our security foundation. I feel more confident that we have a more secure authentication solution," states Tempelman. Since implementing Beyond Identity, the company has experienced zero successful phishing attempts or credential attacks, and it also “gives us more visibility and control over the kind of devices our users actually use.”

‍

Improved user experience

‍

Despite the stronger security measures, employees have responded positively to the new authentication system. "It's hard to get users to say they like security solutions, but, with Beyond Identity, the feedback we get from our employees is good," notes Tempelman. The improved user experience has enabled Teamtailor to enforce more frequent re-authentication without user complaints. “There have been occasions where we have users that spontaneously said that this is a nice way to authenticate or use the system,” Johan added

‍

"It's hard to get users to say they like security solutions, but with Beyond Identity, the feedback we get from our employees is good... There have been occasions where we have users that spontaneously said that this is a nice way to authenticate or use the system”

‍

‍

Cost savings

‍

Teamtailor avoided the need to purchase and deploy password managers for approximately 80% of their workforce. This not only saved direct costs but also eliminated the need for associated user training and support.

‍

Simplified compliance

‍

‍The solution has strengthened Teamtailor's security posture when dealing with external stakeholders. "It's nice to be able to tell external stakeholders like customers, insurance companies, or auditors that we have a phishing-resistant and passwordless authentication solution."

‍

‍

‍

Looking ahead

‍

Looking ahead, as the company grows Teamtailor continues to optimize its use of Beyond Identity's capabilities, adding new access policies and improving user provisioning. The solution has become a cornerstone of their security infrastructure, providing the foundation for secure, efficient authentication across their global workforce.

‍

“I'm able to have good trust and not have to worry about users having bad password hygiene, sharing passwords between multiple services, or getting everybody to use a secure second factor… Just getting rid of passwords is really good from that perspective, and also compared to using native passkeys that are available in Microsoft and Google. With Beyond Identity, we can enforce it on all our users so it gives us more control and trust over our security posture.”